{"id":14828,"date":"2026-10-23T06:40:49","date_gmt":"2026-10-23T06:40:49","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=14828"},"modified":"2026-10-23T06:40:49","modified_gmt":"2026-10-23T06:40:49","slug":"millions-of-cyberattack-attempts-target-websites-as-critical-php-flaws-threaten-crypto-platforms","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=14828","title":{"rendered":"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms"},"content":{"rendered":"<p><\/p>\n<div>\n<div id=\"blockquote-block_2094bf181ab29c64b55922bd132b6c80\" class=\"blockquote-container\" style=\"border-color: #5100fc\">\n<div class=\"blockquote-text\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloudflare chief executive Matthew Prince said exploit attempts climbed from thousands before disclosure to millions after it.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The PHP Foundation said a 2024 audit first surfaced one of the flaws and that work on a fix stalled for months.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SlowMist told crypto firms to upgrade, and Australia\u2019s cyber agency issued a critical alert on the flaws.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p class=\"wp-block-paragraph\">Hackers made millions of attempts to exploit two critical flaws in PHP, the programming language behind much of the web, after its developers released fixes on Wednesday, according to Cloudflare.<\/p>\n<p class=\"wp-block-paragraph\">\u201cIn the 10 hours before it was publicly announced, across the network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now,\u201d Cloudflare chief executive Matthew Prince wrote on X late on Wednesday.<\/p>\n<p class=\"wp-block-paragraph\">The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, carry a severity score of 9.2 out of 10. Both affect all web servers running PHP 5.4 or later, according to Cloudflare. Crafted web requests may let an attacker crash a server, expose sensitive data or run their own code.<\/p>\n<p class=\"wp-block-paragraph\">Cloudflare said PHP is used by almost 70% of websites, including those built on WordPress and Magento.<\/p>\n<h2 id=\"h-a-fix-that-stalled-since-2024\" class=\"wp-block-heading\">A Fix That Stalled Since 2024<\/h2>\n<p class=\"wp-block-paragraph\">The PHP Foundation said a contracted core developer found the first signs of the memory problem behind one of the flaws in 2024. That came during PHP\u2019s first external security audit in years, carried out by Quarkslab.<\/p>\n<p class=\"wp-block-paragraph\">The security team drew up several competing fixes, but each one carried trade-offs. Its work then stalled and restarted for months, the foundation said in a blog post on Wednesday.<\/p>\n<div id=\"blockquote-block_1b39e298b4a0ce0bef289f9fb28229a7\" class=\"blockquote-container variant-personal\">\n<div class=\"blockquote-text\">\n<p>We won\u2019t pretend otherwise: the delay was a structural failure, caused by both the security team\u2019s decision process and its lack of resources.<\/p>\n<\/div>\n<p>\n                PHP Foundation    <\/p>\n<\/div>\n<p class=\"wp-block-paragraph\">Security firm Calif reported a remote code execution flaw with the same root cause on 11 August. After the vulnerability IDs leaked online, PHP brought its release forward a day to 21 October.<\/p>\n<p class=\"wp-block-paragraph\">The foundation said AI-assisted research now finds bugs faster than ever, for defenders and attackers alike. Crypto security experts say AI tooling is speeding up both smart contract hacks and bug hunts.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Read more: Switzerland Approves First Retail Bitcoin ETF Under Domestic Fund Rules<\/strong><\/p>\n<h2 id=\"h-crypto-platforms-told-to-patch\" class=\"wp-block-heading\">Crypto Platforms Told to Patch<\/h2>\n<p class=\"wp-block-paragraph\">Blockchain security firm SlowMist said its MistEye system had scanned PHP-related assets across the crypto industry. It urged platforms, DeFi projects and wallet providers to assess their risk and install the patched versions.<\/p>\n<p class=\"wp-block-paragraph\">BNB Chain executive director of growth Nina Rong posted that the network does not use PHP in its technology stack, and Binance founder Changpeng Zhao posted a warning on X for anyone browsing.<\/p>\n<p class=\"wp-block-paragraph\">In April, attackers hijacked CoW Swap\u2019s front-end domain and drained at least US$1 million (AU$1.43 million) from users.<\/p>\n<p class=\"wp-block-paragraph\">The Australian Signals Directorate\u2019s cyber centre rated its PHP alert critical. It said it was not aware of successful active exploitation within Australia. The agency\u2019s own website, cyber.gov.au, was among the government sites that reported outages.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Read also: BlackRock Makes a Splash with New Bitcoin ETF Filing as IBIT Takes in US$665M<\/strong><\/p>\n<\/p><\/div>\n<p>Crypto Attack,Cryptocurrency,Hackers#Millions #Cyberattack #Attempts #Target #Websites #Critical #PHP #Flaws #Threaten #Crypto #Platforms1792737649<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cloudflare chief executive Matthew Prince said exploit attempts climbed from thousands before disclosure to millions after it. The PHP Foundation said a 2024 audit first surfaced one of the flaws and that work on a fix stalled for months. SlowMist told crypto firms to upgrade, and Australia\u2019s cyber agency issued a critical alert on the<\/p>\n","protected":false},"author":1,"featured_media":14829,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[3168,158,62,7544,6619,2567,7518,870,39,1891,7486],"class_list":["post-14828","post","type-post","status-publish","format-standard","has-post-thumbnail","category-bitcoin","tag-attempts","tag-critical","tag-crypto","tag-cyberattack","tag-flaws","tag-millions","tag-php","tag-platforms","tag-target","tag-threaten","tag-websites"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=14828\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms\" \/>\n<meta property=\"og:description\" content=\"Cloudflare chief executive Matthew Prince said exploit attempts climbed from thousands before disclosure to millions after it. The PHP Foundation said a 2024 audit first surfaced one of the flaws and that work on a fix stalled for months. SlowMist told crypto firms to upgrade, and Australia\u2019s cyber agency issued a critical alert on the\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=14828\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-23T06:40:49+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14828\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=14828\",\"name\":\"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14828#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14828#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/php-website.jpg\",\"datePublished\":\"2026-10-23T06:40:49+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14828#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=14828\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14828#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/php-website.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/php-website.jpg\",\"width\":1920,\"height\":1072},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14828#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=14828","og_locale":"en_US","og_type":"article","og_title":"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms","og_description":"Cloudflare chief executive Matthew Prince said exploit attempts climbed from thousands before disclosure to millions after it. The PHP Foundation said a 2024 audit first surfaced one of the flaws and that work on a fix stalled for months. SlowMist told crypto firms to upgrade, and Australia\u2019s cyber agency issued a critical alert on the","og_url":"https:\/\/cryptonews.uk.com\/?p=14828","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-10-23T06:40:49+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=14828","url":"https:\/\/cryptonews.uk.com\/?p=14828","name":"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=14828#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=14828#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/php-website.jpg","datePublished":"2026-10-23T06:40:49+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=14828#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=14828"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=14828#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/php-website.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/php-website.jpg","width":1920,"height":1072},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=14828#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/14828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14828"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/14828\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/14829"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}